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(54) Postage meter witli removable print head 

(57) A postage meter includes a printing device (19) 
which is removable by a user of the postage meter. The 
printing device may be an ink-jet print cartridge (21) in- 
cluding an integral ink supply. When the ink supply is 
depleted the ink-jet print cartridge must be replaced to 
enable further printing to be effected. The printing de- 
vice has electrical contacts (22) which interface with cor- 
responding electrical connections (20) of the postage 



meter when the printing device is mounted in the post- 
age meter. In order to prevent unauthorised access to 
the print device, access to the printing device for re- 
placement of the printing device is provided by means 
of an aperture (31 ) in a housing (26) of the postage me- 
ter and the aperture is closed by a member (30) which 
can only be unlocked and opened in response to input 
of a coded signal to the postage meter 
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Description 

This invention relates to postage meters in which a 
print head utilised for printing postage indicia is remov- 
ably mounted on the postage meter. 

Postage meters include electronic means for carry- 
ing out accounting functions in respect of postage val- 
ues which it is desired to apply to mail items by operation 
of a printer. The electronic means also carries out con- 
trol functions for operation of the postage meter includ- 
ing operation of the printer. The accounting and control 
^ is carried out in a secure manner by housing the elec- 
tronic means in a secure housing in order to protect the 
integrity of accounting data generated by the accounting 
means and to prevent fraudulent operation of the post- 
age meter. It will be appreciated that it is also necessary, 
or at least desirable, to ensure that the printer cannot 
be operated to print postage indicia in respect of values 
for which proper accounting has not been effected. Ac- 
cordingly the printer is usually housed, together with the 
electronic means, in the secure housing. 

Previously postage meters have been provided with 
a drum printer or a thermal transfer printer for printing 
the postage indicia. With the drum printer, ink for printing 
the postage indicia is supplied by means of a replacea- 
ble absorbent roller containing liquid ink which rolls in 
contact with print dies on the print drum. With thermal 
transfer printers, ink is supplied as a layer on a replace- 
able ribbon which is fed past a thermal print head for 
transfer of ink to the mail items. Both the ink roller and 
the ink ribbon are removable from the postage meter by 
a user of the postage meter for replacement by a new 
ink roller or ink ribbon respectively With both of these 
types of printer, the printer £erse is maintained secure 
by the secure housing. In the case of the drum printer, 
mechanical elements for setting the printing elements 
of the printer are not accessible by a user of the postage 
meter and in the case of a thermal transfer printer elec- 
trical connections to the print head for control and oper- 
ation of the print head are protected from access there- 
to. 

It is now proposed, instead of drum printers or ther- 
mal transfer printers, to use ink jet printing devices. Ink 
jet print heads are already used widely as computer out- 
put printers where security of operation thereof is neither 
a problem nor required. The ink jet print heads manu- 
factured and sold for use in computer output printers 
comprise a module including a row of Inkjet nozzles and 
means for ejecting selectively ink from those nozzles. 
The module also includes electronic circuits for opera- 
tion of the ink ejection means and an ink supply to supply 
ink to the nozzles to replenish ink ejected from the noz- 
zles in printing. When the ink in the ink supply is exhaust- 
ed the entire module including the nozzles and electron- 
ic circuits is removed and replaced by a new ink jet print 
head module. It will be appreciated that the module is 
provided with electrical connections which, when the 
print head module is mounted in the postage meter, in- 



terface with similar connections of the postage meter 

According to the Invention a postage meter is char- 
acterised by a printing device removable by a user of 
the postage meter; electrical connection means Inter- 
s facing with electrical contacts on the printing device 
when the printing device is mounted in the postage me- 
ter; means barring access to said printing device and 
means responsive to an authorisation signal to unlock 
the means barring access to penmit removal and re- 
10 placement of the printing device. 

The printing device may be an ink jet printing device 
including an ink supply The authorisation signal may be 
obtained from a postal authority centre in a communi- 
cation routine between the postage meter and the postal 
authority centre. 

An embodiment of the invention will be described 
hereinafter by way of example with reference to the 
drawings in which: - 



20 



25 



Figure 1 is a block circuit diagram of a postage me- 
ter, 

Figure 2 illustrates a removable ink jet print head 
module, and 

Figure 3 illustrates a postage meter provided with a 
secure access to the print head module. 



Referring first to Figure 1 of the drawings, the post- 
age meter includes electronic accounting and control 
means comprising a micro-processor 10 operating un- 
30 der program routines stored in a read only memory 
(ROM) 11 . A keyboard 12 is provided for input of com- 
mands and data by a user and a display 13 is provided 
to enable display of information to the user. A random 
access memory (RAM) 1 4 is provided for use as a work- 
35 ing store for storage of temporary data during operation 
of the postage meter. Non-volatile duplicated memories 
15, 16 are provided for the storage of critical data relat- 
ing to use of the postage meter and which is required to 
be retained even when the postage meter is not pow- 
40 ered. The microprocessor 10 carries out accounting 
functions in relation to use of the postage meter for 
franking mail items with amounts of postage charges ap- 
plicable to handling of the mail items by the postal au- 
thority or another carrier. Accounting data relating to use 
45 of the postage meter for printing franking indicia repre- 
senting postage charges for mail items and any other 
critical data to be retained is stored in the non-volatile 
memories 15, 16. The accounting data includes a value 
of credit, an accumulated total of value used by the me- 
50 ter in franking mail items, a count of the number of mail 
items franked by the meter and a count of the number 
of mail items franked with a postage charge in excess 
of a predetermined value. The value of credit may be a 
value of credit available for use by the meter and stored 
S5 \n a descending credit register. The accumulated total 
value used by the meter is stored in an ascending tote 
register, the count of items is stored in a piece count 
register and the count of items franked with a postage 
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charge in excess of a predetermined value is stored in 
a large items register. Alternatively, it desired, instead 
of a descending register storing a value of credit avail- 
able for use by the meter, a total value of credit entered 
into the meter may be stored in an ascending credit reg- 
ister. 

As is well known in the postage meter art, each of 
the registers referred to hereinbefore for storing ac- 
counting data is replicated in order to enable integrity of 
the accounting data to be maintained even in the event 
of a fault or termination of power to the meter during a 
franking operation. Two replications of each of the reg- 
isters are provided in each of the memory devices 15, 
16. 

A motor controller 1 7 is controlled by the microproc- 
essor 10 to control operation of motors 18 driving feed- 
ing means (not shown) for feeding a mail item past a 
stationery digital print head 19 or for moving the digital 
print head in a translation a I movement relative to a print 
receiving area of a stationary mail item. The digital print 
head 19 Is a removable print head connected to the 
postage meter by means of a connector 20. The digital 
print head is preferably an Ink jet print head constructed 
as a module 21 as shown in Figure 2. The module is 
provided with a plurality of electrically conductive pads 
22 which interface with conductive elements of the con- 
nector 20 when the module 21 is mounted in the postage 
meter. The connector 20 may be formed Integrally with 
a ribbon cable 24 and conductive areas of the ribbon 
cable may be formed as the conductive elements of the 
connector 20 making electrical connection with the pads 
22 of the print head module. The Inkjet print head in- 
cludes a plurality of Ink ejection nozzles (not shown) 
from which Ink may be ejected selectively by means of 
the operation of electronic circuits In the module. The 
module also contains a supply of Ink to replenish ink 
ejected from the nozzles. The ribbon cable 24 Includes 
a plurality of conductive tracks providing connections 
between the electronic circuits of the print head module 
and for providing electrical power from a power supply 
25 to the print head module. Electrical power Is supplied 
to the electronic circuits of the postage meter including 
the microprocessor, the print head module and the mo- 
tor control from a power source 25. 

Sensors 23 are provided to sense and monitor feed- 
ing of the mail item If the print head is stationary or to 
sense and monitor motion of the print head if the mail 
item is stationary. The sensors provide signals to the mi- 
croprocessor to enable the microprocessor to control 
feeding of the mail item or motion of the print head and 
to output signals on the ribbon cable 24 to selectively 
operate the circuits in the print head module to eject ink 
droplets from the nozzles at appropriate times to create 
a required imprint on the mall item. 

It will be appreciated, as Is well known In the post- 
age meter art, that the postage meter must operate In a 
secure manner and be protected from attempts to use 
the meter fraudulently for example by utilising the post- 



age meterto print franking indicia on mail items for which 
no corresponding postage charge has been accounted 
for by the accounting means. Accordingly those parts of 
the postage meter required to be secured against unau- 

s thorised tampering are housed in a secure housing 26. 
In so-called prepayment operation of a postage me- 
ter, each time a franking operation is to be performed, 
the micro-processor carries out a routine In which a de- 
terminatkDri is made as to whether the value of credit In 

10 the credit register In NVMs 15, 16 is sufficient to permit 
the franking operation In respect of the required postage 
charge for a mail Item to be performed. If the value of 
credit In the credit register is sufficient, the franking op- 
eration is continued and the accounting data in the reg- 

is isters is updated to account for the postage charge and 
the franking indicia is printed. However if the value of 
credit in the credit register Is not sufficient to permit the 
franking operation in respect of the required postage 
charge to be performed, the operation is terminated and 

20 the franking indicia Is not printed. Where a value of credit 
available for use in franking is stored in a descending 
register, the check as to sufficiency of the credit availa- 
ble is effected by a detemnination of whether the postage 
charge Is less than the credit value. Where a total value 

25 of credit is stored in an ascending credit register the 
check as to sufficiency of credit is effected by a deter- 
mination of whether the total value of credit is at least 
equal to the sum of the postage amount and the accu- 
mulated total value in the tote register. 

30 As described hereinbefore, the print head module 
22 includes an Ink supply. Accordingly when the ink sup- 
ply Is exhausted the module 22 must be removed and 
replaced by a new module containing a full ink supply. 
Removal of the used module and replacement by a new 

35 module needs to be effected by a user of the postage 
whenever the ink supply becomes exhausted. As a re- 
sult, if no protection is provided, access to the conduc- 
tive elements of the connector 20 or to the electrically 
conductive pads 22 of the print head module 21 would 

40 be possible. Therefore it may be possible for anyone 
with a fraudulent Intent to effect access to the conductive 
elements of the connector- 20 or to the pads 22 of the 
module and thereby cause improper operation of the 
postage meter or print head. Printing of postage indicia 

4S for which accounting has not been carried out could be 
effected. 

Accordingly in order to prevent attempts to operate 
the postage meter or print head fraudulently by gaining 
access to the electrical connections between the post- 
so age meter and the print head module, unauthorised ac- 
cess to the module is barred by the secure housing 26 
and limited access only for replacement of the print head 
module is provided via an opening 31 in the secure 
housing which is closed by a hatch cover 30. Normally 
ss the cover is locked by an electronically operable lock 32. 
It will be appreciated that the opening permits only suf- 
ficient access to permit replacement of the print head 
module and the secure housing is so constructed as to 
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prevent unauthorised access to any other part of the 
postage meter that is required to be maintained secure. 
In order for a user to gain access to the print head mod- 
ule for the purpose ot replacement of the module, the 
cover 30 must be unlocked by entry to the postage meter 
of an authorisation signal, for example a code. The code 
may be obtained from the postal authority by telephone 
communication by the user with the postal authority and 
then input to the postage meter by means of the key- 
board 12. However it is preferred to provide a direct 
communication link 27 between the postage meter and 
a postal authority centre 28. The meter is provided with 
an I/O port 29 for connection to the communication link 
27. The cover may be locked by means of a lock which 
operates mechanically and automatically to secure the 
cover in a closed position when the cover is moved to 
the closed position. The lock may be unlocked to release 
the cover by means of the operation of a solenoid or 
motor under the control of the microprocessor 10. A sen- 
sor (not shown) responsive to the cover being in the 
closed position is provided to inhibit operation of the 
postage meter except when the cover is fully closed and 
locked in the closed position. 

When a user desires to replace the module 21, the 
user operates the keyboard to put the meter into a mod- 
ule replacement routine. The microprocessor 10 carries 
out the routine which includes establishing communica- 
tion with the postal authority centre, receiving the code 
authorising release of the lock, verifying that the code 
is authentic and then releasing the lock to permit open- 
ing of the cover and thence ot access to the module for 
removal thereof. The routine may include the provision 
of register data to the postal authority. The register data 
preferably includes a count of the number of mail items 
processed by the meter since the previous replacement 
of the print head module. Thus the postal authority cen- 
tre is enabled to check that the number of items proc- 
essed or the time since the previous replacement is 
within acceptable limits. By the provision of the locked 
cover, the postal authority is able to withhold unlocking 
of the cover if previous operation of the postage meter 
has been unsatisfactory or if there is any suspicion of 
fraudulent use of the postage meter. 

Messages sent by the postage meter to the postal 
authority may be sent in a secure manner. This may be 
effected by providing the postage meter with a security 
circuit 33 which may be encryption means operative to 
encrypt information to be contained in the message and 
then including the encrypted information in the message 
transmitted by the postage meter. Thereby the postal 
authority is enabled by encryption of the information or 
by decryption of the encrypted information to authenti- 
cate and verify that the information received in the mes- 
sage is correct and has not been tampered with or cor- 
rupted. Thus the postal authority can be assured that 
data, for example the register information, is correct and 
not corrupted. As an alternative to encryption of the in- 
formation to be contained in the message, a digital sig- 



nature based on the information may be generated by 
the security circuit 31 and included in the transmitted 
message. The postal authority may then use the digital 
• signature to verify and authenticate the received mes- 
B sage. Similarly any messages, including the coded sig- 
nal, sent by the postal authority to the postage meter 
may include an encryption or digital signature to enable 
the postage meter to verify that the received message 
or code is authentic. The security circuit 31 may be op- 
10 e rated by the microprocessor 10 to operate on the re- 
ceived message or coded signal and to utilise the en- 
crypted information or the digital signature to verify and 
authenticate the received message or coded signal. 
Hereinbefore a system providing only authorised 
IS access permitting replacement of a print head module 
has been described. However if desired the authorisa- 
tion of access may be in respect of other components 
or functions of the postage meter. Accordingly reference 
to replacement of a print head module is to be under- 
go stood as including other components of the postage me- 
ter and to authorisation of modification of functions of 
the postage meter. 

25 Claims 

1 . A postage meter characterised by a printing device 
(19) removable by a user of the postage meter; 
electrical connection means (20) interfacing with 

30 . electrical contacts (22) on the printing device when 
the printing device is mounted in the postage meter; 
means (30) barring access to said printing device 
and means (10) responsive to an authorisation sig- 
nal to unlock the means barring access to permit 

3S removal and replacement of the printing device. 

2. A postage meter as claimed in claim 1 wherein the 
printing device (1 9) comprises a module (21 ) includ- 
ing an ink jet print head and an ink supply for said 

40 ink jet print head. 

3. A postage meter as claimed in claim 1 or 2 wherein 
the printing device (19) is located within a secure 
housing (26) ; said secure housing includes an ac- 

45 cess aperture (31) for removal and replacement of 
the printing device; and the means barring access 
includes a closure means (30) for said aperture. 

4. A postage meter as claimed in claim 3 wherein the 
50 closure means (30) has an open position permitting 

access through the aperture (31) to the printing de- 
vice (19) for removal and replacement of the print- 
ing device and a locked closed position preventing 
access to the printing device; and including sensor 
55 means (23) responsive to the position of the closure . 
means and operative to permit operation of the 
postage meter for printing only in response to sens- 
ing that the closure means is in the locked closed 



20 



7 



EP q875 865 A2 



position. . . / : ' ' . 

A postage meter as claimed in claim 3 or 4 wherein 
the authorisation signal is a coded signal and the 
postage meter includes means (10) responsive to s 
the coded signal to verify authenticity of the coded 
signal and in response to a determination that the 
coded signal is authentic to unlock the closure 
means (30) to permit access to the printing device. 

A postage meter as claimed in claim 5 whereiri the 
authorisation signal includes an encryption of infor- 
mation contained in the authorisation signal. 

A postage meter as claimed in claim 5 wherein the is 
authorisation signal includes a digital signature de- 
pendent upon information contained in the authori- 
sation signal. 
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